Beveiligingsadvies

CVE-2025-71339

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-22 21:04:41

Laatst bijgewerkt 2026-06-23 15:06:10

Toegewezen door VulnCheck

CVSS-score 8.1

Status PUBLISHED

Beschrijving

Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran._eval_length gadget in pickle __reduce__ methods, allowing arbitrary code execution. Attackers can craft malicious pickle files that execute arbitrary Python code when loaded by victims who trust Picklescan's safety validation.

← Alle CVE's bekijken Bekijk op cve.org ↗